You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Attila Magyar (JIRA)" <ji...@apache.org> on 2018/11/14 08:35:00 UTC

[jira] [Created] (AMBARI-24894) Sensitive service configuration values should be decrypted when processing the Ambari agent command script, if enabled

Attila Magyar created AMBARI-24894:
--------------------------------------

             Summary: Sensitive service configuration values should be decrypted when processing the Ambari agent command script, if enabled
                 Key: AMBARI-24894
                 URL: https://issues.apache.org/jira/browse/AMBARI-24894
             Project: Ambari
          Issue Type: Task
          Components: ambari-agent, ambari-server
            Reporter: Attila Magyar
            Assignee: Attila Magyar
             Fix For: 2.8.0


Sensitive service configuration values should be decrypted when processing the Ambari agent command script, if enabled.

During the processing of resource_management.libraries.script.script.Script#execute, the command data file is to be read in and the encrypted values in the JSON document are to be decrypted before executing the command.

Each encrypted value will be in the form of

${enc=<algorithm_encoding>, value=<value>}
For example:

${enc=aes265_hex, value=5248...303d}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)